Senior RMF ISSO
About The Position
Connected Logistics is seeking a Senior ISSO to oversee the RMF Steps 1 through 3 Lead, to assist in providing the Department of State Directorate of Technology (DT), Enterprise Architecture (EA), Cyber Security Team (CST) comprehensive cybersecurity support services to protect critical consular systems and data. The CST Cyber portfolio ensures compliance with federal mandates including the Federal Information Security Modernization Act (FISMA) and the Risk Management Framework (RMF), encompassing security monitoring, incident response, threat detection, vulnerability management, and continuous authorization activities. The Senior ISSO, RMF (Steps 1 through 3 Lead) manages two delivery pods supporting consular system authorization. The Lead assigns work according to system complexity, mission risk, authorization schedules, and package readiness, while maintaining consistent technical practices and current records in ArchAngel.
Requirements
- U.S. citizenship and a final Secret clearance or higher.
- Relevant degree in cybersecurity, computer science, information systems, or a related discipline, subject to the Senior ISSO LCAT and permitted substitutions.
- Senior-level Federal ISSO or RMF experience with demonstrated leadership of authorization package development and technical teams.
- Proficiency in NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, FIPS 199, NIST SP 800-60, control inheritance, and evidence traceability.
- Ability to evaluate on-premises, cloud, and hybrid system architectures and translate security requirements into actionable technical guidance.
- Meet applicable LCAT certification requirements and maintain required credentials.
Nice To Haves
- CISSP, CGRC, or CISM.
- DOS/CST experience with ArchAngel, TRT reviews, Department overlays, and authorization workflows.
- Experience with FedRAMP inheritance, DevSecOps evidence, and reusable control implementation libraries.
Responsibilities
- Responsible for directing system categorization, control selection, implementation documentation, evidence collection, and assessment readiness across the RMF Steps 1 through 3 delivery teams.
- Direct Pod Leads and IASS personnel; balance workload and establish primary and backup system assignments.
- Review authorization boundaries, information types, architecture and data flows, FIPS 199 categorization, and NIST SP 800-60 mappings.
- Direct NIST SP 800-53 Rev. 5 baseline selection, Department overlays, tailoring, compensating controls, and inherited-control documentation.
- Review SSP implementation statements, supporting evidence, Evidence Index entries, known gaps, and draft POA&Ms.
- Coordinate privacy, digital identity, contingency, risk, and documentation support from shared specialists.
- Support Technical Review Team reviews, resolve comments, and conduct implementation-readiness reviews before independent assessment.
- Verify that DevSecOps pipeline security requirements and relevant scan evidence are represented in system authorization artifacts.
- Preserve the independent assessor's authority over assessment methods, findings, and conclusions.
Benefits
- health, dental, vision, life, and disability insurance
- a great 401(k) package
- generous Paid Time Off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
